uniweb 1.17.0 → 1.17.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "uniweb",
-  "version": "1.17.0",
+  "version": "1.17.1",
   "description": "Create structured Vite + React sites with content/code separation",
   "type": "module",
   "bin": {
@@ -41,15 +41,15 @@
     "js-yaml": "^4.1.0",
     "prompts": "^2.4.2",
     "tar": "^7.0.0",
-    "@uniweb/schemas": "~1.6.5",
-    "@uniweb/semantic-parser": "~1.12.2",
+    "@uniweb/content-writer": "~1.3.0",
     "@uniweb/core": "~1.4.0",
-    "@uniweb/content-writer": "~1.3.0"
+    "@uniweb/schemas": "~1.6.5",
+    "@uniweb/semantic-parser": "~1.12.2"
   },
   "peerDependencies": {
-    "@uniweb/build": "~1.8.0",
-    "@uniweb/semantic-parser": "~1.12.2",
-    "@uniweb/content-reader": "~1.5.4"
+    "@uniweb/build": "~1.8.1",
+    "@uniweb/content-reader": "~1.5.4",
+    "@uniweb/semantic-parser": "~1.12.2"
   },
   "peerDependenciesMeta": {
     "@uniweb/build": {

package/src/backend/site-sync.js

@@ -92,6 +92,17 @@ function entityDocFromUwx(buf) {
   return null
 }
 
+// What a `.uwx`'s entries inflate to, summed — the quantity a backend's package limit counts.
+// null for anything that is not a readable `.uwx`.
+function inflatedSizeOfUwx(buf) {
+  if (!buf || buf.length < 2 || buf[0] !== 0x50 || buf[1] !== 0x4b) return null
+  try {
+    return [...readZip(buf).values()].reduce((n, data) => n + data.length, 0)
+  } catch {
+    return null
+  }
+}
+
 // Every entity `$`-document of a `.uwx` in the order it was submitted — the manifest's, which is
 // what a push's `finalized[].index` counts in. null where a listed file is missing or unreadable.
 function submittedDocsFromUwx(buf) {
@@ -2169,12 +2180,13 @@ export async function pushSyncPackages({
   // `boundUuid` is set only for the lanes that address an EXISTING site by uuid
   // (content UPDATE, folder push) — never for the CREATE, which has no uuid to be
   // wrong about. It is what lets a 404 be read as "the site this clone is bound to
-  // is gone" rather than "the route is missing".
+  // is gone" rather than "the route is missing". `sent` is the package the lane sends,
+  // which a refusal for size measures.
   const postLane = async (
     label,
     doRequest,
     explainStale = async () => [],
-    { boundUuid = null, reportTemplate = false } = {}
+    { boundUuid = null, reportTemplate = false, sent = null } = {}
   ) => {
     info(`Pushing ${label} to ${dim(client.origin)} …`)
     let res
@@ -2191,7 +2203,7 @@ export async function pushSyncPackages({
       // Two unrelated conflicts share HTTP 409, so branch on the machine-readable
       // `reason` — never on `detail`, which is prose the backend may reword.
       let problem = null
-      if ((res.status === 409 || res.status === 400 || res.status === 403 || res.status === 422) && body) {
+      if ((res.status === 409 || res.status === 400 || res.status === 403 || res.status === 413 || res.status === 422) && body) {
         try {
           problem = JSON.parse(body)
         } catch {
@@ -2376,6 +2388,25 @@ export async function pushSyncPackages({
           `  deleted there  →  uniweb forget --server ${client.origin}, then push again: it creates a NEW site`
         )
         note('Deleting this folder removes only your local copy, either way.')
+      } else if (res.status === 413) {
+        // ⭐ TWO LIMITS, ON TWO QUANTITIES, BOTH THE BACKEND'S (backend, 2026-10-23): the
+        // request as sent, and the package as its entries inflate. A package refusal names its
+        // limit (`package_too_large`, `limit` in bytes), so quote it beside what this package
+        // inflates to. A request refusal names none, so say what was sent and quote no limit —
+        // a copy of theirs here would be a second constant to drift. The package is already
+        // Deflated (`createZip`), so there is no smaller form of it to retry with.
+        if (problem?.reason === 'package_too_large') {
+          const inflated = humanBytes(inflatedSizeOfUwx(sent))
+          const limit = humanBytes(problem.limit)
+          note(
+            `${inflated ? `This push's content is ${inflated} uncompressed` : "This push's content is too large"} — more than the ${limit ? `${limit} ` : ''}the backend at ${client.origin} takes in one push.`
+          )
+        } else {
+          const size = humanBytes(sent?.length)
+          note(
+            `${size ? `This push sent ${size}` : 'This push was too large'} — more than the backend at ${client.origin} accepts in one request.`
+          )
+        }
       } else if (problem?.reason === 'template_records_not_copyable' && Array.isArray(problem.records)) {
         // ⭐ A push asking to designate the site a template is refused whole when a record in its
         // folder cannot be copied into the sites made from it — each named, with a `detail` written
@@ -2615,7 +2646,7 @@ export async function pushSyncPackages({
             localBuffer: siteContent.buffer,
             uuid: siteContentUuid
           }),
-        { boundUuid: siteContentUuid, reportTemplate: true }
+        { boundUuid: siteContentUuid, reportTemplate: true, sent: siteContent.buffer }
       )
       if (!finalized) {
         mergeHarvested()
@@ -2631,7 +2662,7 @@ export async function pushSyncPackages({
         'site-content',
         () => client.createSiteContent(siteContent.buffer, { source }),
         undefined,
-        { reportTemplate: true }
+        { reportTemplate: true, sent: siteContent.buffer }
       )
       if (payload === null) return { exitCode: 1, finalizedTotal, wrote }
       const minted = extractMintedSiteUuid(payload)
@@ -2679,7 +2710,7 @@ export async function pushSyncPackages({
       'records',
       () => client.pushFolder(boundSiteUuid, records.buffer, { source }),
       undefined,
-      { boundUuid: boundSiteUuid }
+      { boundUuid: boundSiteUuid, sent: records.buffer }
     )
     if (!finalized) {
       mergeHarvested({ point: false })

package/src/commands/pull.js

@@ -338,8 +338,8 @@ export function describeUnplacedRecords({ docs, taken, skipped }) {
 }
 
 // Read a pull lane's bytes into entity `$`-documents. The backend serves a `.uwx`
-// (our Stored ZIP: `manifest.json` + `entities/<uuid>.json`); the entity files ARE the
-// documents. Falls back to a JSON body (a raw doc, a `{document}`/`{entity}` envelope,
+// (a ZIP of `manifest.json` + `entities/<uuid>.json`, each entry Stored or Deflate —
+// `readZip` reads both); the entity files ARE the documents. Falls back to a JSON body (a raw doc, a `{document}`/`{entity}` envelope,
 // or a list) so the lane survives a future envelope change. Returns an array (possibly
 // empty).
 export function readPullDocuments(buf) {

package/src/framework-index.json

@@ -1,12 +1,12 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-10-23T17:42:44.689Z",
+  "generatedAt": "2026-10-23T19:14:59.641Z",
   "packages": {
     "@uniweb/api": {
       "version": "1.6.4"
     },
     "@uniweb/build": {
-      "version": "1.8.0"
+      "version": "1.8.1"
     },
     "@uniweb/content-reader": {
       "version": "1.5.4"

package/src/utils/uwx-read.js

@@ -21,12 +21,14 @@
  *
  * ## Two things measured on a real payload, both of which would break a naive reader
  *
- * 1. ⛔ **The archive is NOT "stored".** `pull.js` describes the format as *"our
- *    Stored ZIP"*, and that is true of `manifest.json` and false of the entity
- *    files — measured on a live pull: `manifest.json` method 0 (STORED), the
- *    entity JSON method 8 (DEFLATED). A stored-only reader silently yields the
+ * 1. ⛔ **The archive is NOT "stored".** `pull.js` described the format as *"our
+ *    Stored ZIP"* until 2026-10-23, and that is true of `manifest.json` and false of
+ *    the entity files — measured on a live pull: `manifest.json` method 0 (STORED),
+ *    the entity JSON method 8 (DEFLATED). A stored-only reader silently yields the
  *    manifest and drops the document, i.e. it returns success and no entities.
- *    **Both methods are handled below and the tests cover a mixed archive.**
+ *    **Both methods are handled below and the tests cover a mixed archive.** Our own
+ *    writer (`@uniweb/build`'s `createZip`) has Deflated too since that day, so no
+ *    `.uwx` in either direction is Stored-only.
  * 2. The entity payload is the *only* thing wanted; `manifest.json` is skipped, as
  *    every other reader in the tree does.
  *